Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d985554a02ec43090f82db8c875921b0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.d985554a02ec43090f82db8c875921b0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.d985554a02ec43090f82db8c875921b0.exe
-
Size
200KB
-
MD5
d985554a02ec43090f82db8c875921b0
-
SHA1
eee8237df53e9bb0db505b6d64c2ee5252f6908c
-
SHA256
36c78c76269da4f6e913cb592f9c89a0932690cab456f343b52f2d4d79c5ef98
-
SHA512
52329cf17b229cfa4b720219cd7cd4c470d61dac949105c1d9fcb7fa25fa16753db950ceb21ebbe07a13ca1f5c97ce62a1fbb411c0d65cbdf57809b68deb4fc1
-
SSDEEP
768:VvMeEXxR3F8UNvrJb0PztsYDpVLGc3HZWok/6pSypktyYrz6/1H5J:VkzXF8CvrJ4PBhDP35RQxz4z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.d985554a02ec43090f82db8c875921b0.exe
Files
-
NEAS.d985554a02ec43090f82db8c875921b0.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfcd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ